MediaTek Apusys Use-After-Free Vulnerability Leading to Privilege Escalation

A use-after-free vulnerability has been identified in the Apusys component of certain MediaTek chipsets. This vulnerability can cause memory corruption and may lead to local privilege escalation, particularly for an actor who has already gained system privileges. The issue does not require user interaction for exploitation.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation.

Remediation

Device OEMs have been notified of this vulnerability and the corresponding security patches are available. For further information, OEMs can contact their MediaTek representative.